Merge pull request #692 from Ankit152/slsre-523

[SLSRE-523] [OSD Audit 2026] Addon-Operator - High Vulnerability Remediation

Author: Ajpantuso

.ci-operator.yaml

@@ -1,4 +1,4 @@
 build_root_image:
   name: boilerplate
   namespace: openshift
-  tag: image-v7.4.0
+  tag: image-v8.3.1

boilerplate/_data/backing-image-tag

@@ -1 +1 @@
-image-v7.4.0
+image-v8.3.1

boilerplate/_data/last-boilerplate-commit

@@ -1 +1 @@
-3a53b879fcefaa73705c6621d386953df95a4842
+e16189b1e1fb49e61237798a885a158e232a6ff5

boilerplate/openshift/golang-osd-operator/Dockerfile.olm-registry

@@ -4,7 +4,7 @@ COPY ${SAAS_OPERATOR_DIR} manifests
 RUN initializer --permissive
 
 # ubi-micro does not work for clusters with fips enabled unless we make OpenSSL available
-FROM registry.access.redhat.com/ubi8/ubi-minimal:latest
+FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
 
 COPY --from=builder /bin/registry-server /bin/registry-server
 COPY --from=builder /bin/grpc_health_probe /bin/grpc_health_probe

boilerplate/openshift/golang-osd-operator/ensure.sh

@@ -8,7 +8,7 @@ fi
 REPO_ROOT=$(git rev-parse --show-toplevel)
 source $REPO_ROOT/boilerplate/_lib/common.sh
 
-GOLANGCI_LINT_VERSION="2.0.2"
+GOLANGCI_LINT_VERSION="2.7.2"
 OPM_VERSION="v1.23.2"
 GRPCURL_VERSION="1.7.0"
 DEPENDENCY=${1:-}

build/Dockerfile

@@ -1,4 +1,4 @@
-FROM quay.io/redhat-services-prod/openshift/boilerplate:image-v7.4.0 AS builder
+FROM quay.io/redhat-services-prod/openshift/boilerplate:image-v8.3.1 AS builder
 
 WORKDIR /workdir
 
@@ -10,7 +10,7 @@ COPY . .
 RUN make go-build
 
 ###
-FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10-1752564239
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7-1770267347
 
 ENV USER_UID=1001 \
     USER_NAME=addon-operator

build/Dockerfile.olm-registry

@@ -4,7 +4,7 @@ COPY ${SAAS_OPERATOR_DIR} manifests
 RUN initializer --permissive
 
 # ubi-micro does not work for clusters with fips enabled unless we make OpenSSL available
-FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10-1752564239
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7-1770267347
 
 COPY --from=builder /bin/registry-server /bin/registry-server
 COPY --from=builder /bin/grpc_health_probe /bin/grpc_health_probe

build/Dockerfile.webhook

@@ -1,4 +1,4 @@
-FROM quay.io/redhat-services-prod/openshift/boilerplate:image-v7.0.0 AS builder
+FROM quay.io/redhat-services-prod/openshift/boilerplate:image-v8.3.1 AS builder
 
 WORKDIR /workdir
 
@@ -10,7 +10,7 @@ COPY . .
 RUN GOOS=linux CGO_ENABLED=1 GOARCH=amd64 GOFLAGS="" go build -o build/_output/bin/addon-operator-webhook ./cmd/addon-operator-webhook
 
 ###
-FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10-1752564239
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7-1770267347
 
 ENV USER_UID=1001 \
     USER_NAME=addon-operator

deploy-extras/docker/Dockerfile.src.ci

@@ -1,5 +1,5 @@
 # Used for local dev only
-FROM registry.access.redhat.com/ubi8/ubi:8.8-1032
+FROM registry.access.redhat.com/ubi9/ubi:9.7-1770238273
 
 RUN yum update -y && yum install -y python3 python3-pip
 

deploy-extras/docker/api-mock.Dockerfile

@@ -1,5 +1,5 @@
 # Used for local dev only
-FROM registry.access.redhat.com/ubi8/ubi:8.8-1032
+FROM registry.access.redhat.com/ubi9/ubi:9.7-1770238273
 
 WORKDIR /